Re: [Re: [xacml] obligations & error conditions] - PROPOSAL

MHonArc v2.5.0b2 -->





















xacml message






[Date Prev]
 | [Thread Prev]
 | [Thread Next]
 | [Date Next]

--

[Date Index]
 | [Thread Index]
 | [List Home]








Subject: Re: [Re: [xacml] obligations & error conditions] - PROPOSAL




From: Bill Parducci <>
To: xacml <>
Date: Thu, 15 Apr 2004 06:49:48 -0700






based on these two points alone (PEPs making decisions/PEP modifying decisions 
on the fly) i fear that we are getting further way from agreement rather than 
closer. i think that this is going to have to be worked out on a white board at 
the f2f unless you can come up with a succinct proposal for modifications to the 
spec before then. either way, i can feel our discussion circling and that tells 
me that we need to get the rest of the TC to take a look at this ;o)

b

+++

Polar Humenn wrote:

> Now, you are getting it. The PEP is free to make that access control
> decision.
[...]
> I said that I am fine with that interpretation, if it needs to be there.
> The PEP can consider it an Error, (Indeterminate), and take steps to
> either make an outright decision (of Permit or Deny), or take alternative
> action.